​​Better security starts with better questions

As organizations move beyond AI experimentation, success will depend on how effectively they combine intelligence and trust. The same systems that amplify knowledge, accelerate decisions, and unlock new outcomes must also protect data, govern AI, and build resilience. In this next phase of...

MINI-5JC8-Q6CJ-82QP

Bulletin has no description...

Coordinated Cyberattack Targets 30+ Minnesota Water Systems as One Plant Goes Offline

A coordinated cyberattack targeted operational technology at more than 30 Minnesota community water systems on July 26 and 27, triggering a statewide cybersecurity response. Braham, Plymouth, South St. Paul and Maple Plain have publicly described a plant outage, communications failures or affecte...

CVE-2026-58154

Apache Traffic Server can write out of bounds or overflow integers while parsing MIME and HTTP headers. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which f...

GHSA-CG63-H6R4-GP45 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-MMG7-4C9C-2R54 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2026-16384 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2026-16385 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-H655-847G-Q4F7 vulnerabilities

Vulnerabilities for packages: xorg-server...

CVE-2026-55999 vulnerabilities

Vulnerabilities for packages: xorg-server...

CVE-2026-16384 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-XMQ2-CRJ6-VR9M vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-C68Q-H477-5646 vulnerabilities

Vulnerabilities for packages: eco-python-curl...

CVE-2026-9546 vulnerabilities

Vulnerabilities for packages: eco-python-curl...

CVE-2026-9547 vulnerabilities

Vulnerabilities for packages: eco-python-curl...

Linux Distros Unpatched Vulnerability : CVE-2026-58188

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Several Apache Traffic Server experimental plugins have memory-safety and limit-bypass errors. This issue affects Apache Traffic Server: from 8.0.0 through...

SecRespond: Benchmarking AI Agents for Real-World Post-Compromise Incident Response

Large Language Model LLM agents are increasingly adopted in real-world security operations with access to host artifacts and command-line interfaces CLIs, making it critical to thoroughly assess their security capabilities. However, existing cybersecurity benchmarks focus on pre-compromise settin...

CVE-2026-18022: Integer Overflow or Wraparound

Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected...

distributed-system-testing — Updated!

Distributed Systems Testing Skills Two skills for AI coding agents that design and run claim-driven tests for distributed and stateful systems. Together they produce a structured Markdown test plan and a findings report with 10-state verdicts and an explicit SUT / harness / checker / environment...

Malicious code in @joyfill/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90bed9c7a2d887bec8559ce5eb8d86d3af53b17bfcc685a0469c2f1727979f78 No a static rule matches and no traced behavioral findings were produced for @joyfill/[email protected]. The package artifact does no...